PkgRadar

Composer · packagist.org

tiderjian/think-core

Php Base64 Eval Chain, Php Shell With Decode

Why PkgRadar flagged v15.1.0

SeveritySignalEvidence
highPhp Base64 Eval Chainquansitech-think-core-90105ac/src/Library/Think/App.class.php
highPhp Shell With Decodequansitech-think-core-90105ac/src/Library/Think/App.class.php

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v15.1.0Review222026-06-22

Block this in CI

PkgRadar gates tiderjian/think-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer tiderjian/[email protected]